Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133322e302f32322d3232203d3e203533303138.roa
File:                     3137372e37322e3133322e302f32322d3232203d3e203533303138.roa (raw, json)
Hash identifier:          DWUWg1pYqajjtgjigE4jqzRBVCUy6d2gHas4lYjmDwA=
Subject key identifier:   38:CE:AF:EC:B9:BA:AD:4A:BA:D2:AA:12:1D:23:18:42:5C:83:89:D0
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       0F0BF68B95149845FE33E29BC7DB8FDFE9E7780D
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133322e302f32322d3232203d3e203533303138.roa
Signing time:             Wed 10 Jun 2026 10:35:35 +0000
ROA not before:           Wed 10 Jun 2026 10:30:35 +0000
ROA not after:            Wed 09 Jun 2027 10:35:35 +0000
asID:                     53018
IP address blocks:        177.72.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0b:f6:8b:95:14:98:45:fe:33:e2:9b:c7:db:8f:df:e9:e7:78:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Jun 10 10:30:35 2026 GMT
            Not After : Jun  9 10:35:35 2027 GMT
        Subject: CN=38CEAFECB9BAAD4ABAD2AA121D2318425C8389D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:d0:d1:76:09:c2:02:07:af:c8:20:4d:d1:
                    a0:53:8e:dc:a9:c3:91:5a:13:2d:0e:0b:96:2f:50:
                    0f:e9:84:a2:bd:b7:69:74:14:7d:37:35:fd:ae:34:
                    9d:cf:33:16:fe:31:97:ea:d3:0f:ab:21:aa:2a:60:
                    b8:b7:79:bf:6e:49:b5:c7:f0:3a:29:ba:69:4c:4a:
                    4f:01:66:67:fb:d9:ba:e6:24:83:78:46:67:5b:ee:
                    b0:36:18:56:06:41:fa:63:a2:4d:22:41:1e:97:14:
                    11:85:c3:a4:e4:3a:fe:da:1e:6d:c0:b5:55:14:70:
                    f7:33:86:be:32:c9:71:c0:3b:4e:be:78:d2:da:0d:
                    b5:69:e2:e5:33:90:4e:e7:dd:7c:91:2a:1e:61:59:
                    6c:55:fa:6e:6a:aa:c7:93:fe:67:67:3e:fc:e7:23:
                    25:a6:db:3d:04:5e:72:64:ad:78:74:07:50:f5:df:
                    0c:5a:94:d5:b1:89:1f:81:03:6f:e0:72:35:75:dc:
                    af:77:33:09:1e:03:87:b1:72:1d:c4:b0:ac:1b:b3:
                    c9:5e:f2:84:79:9a:42:75:d6:92:3c:03:c9:60:d1:
                    06:47:f8:5f:dc:fe:4e:28:88:af:06:50:1a:e5:83:
                    d3:9c:d8:cc:e8:d5:3a:96:0c:92:47:8a:97:6b:ab:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CE:AF:EC:B9:BA:AD:4A:BA:D2:AA:12:1D:23:18:42:5C:83:89:D0
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133322e302f32322d3232203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:0d:7e:82:5a:17:d5:be:38:cc:5e:eb:e6:a7:48:87:15:1d:
         10:5d:66:e3:80:6b:33:9a:af:35:f0:06:76:17:c0:eb:f8:30:
         9f:6f:bd:34:6d:11:38:f1:3f:2d:47:c8:8e:fa:74:10:19:29:
         4f:e6:e0:a7:18:be:bd:7d:41:67:52:48:e8:f0:c0:0c:8a:e6:
         a5:b7:e2:90:dd:b4:13:b5:a7:31:37:3b:82:5e:2d:5a:f2:49:
         2d:40:10:56:e2:17:35:45:d0:ca:bf:0c:a7:8d:4a:70:5b:e6:
         c9:72:43:52:07:ac:02:17:26:7b:a0:44:61:9c:9f:a1:c2:02:
         ac:72:4a:21:23:d8:30:5c:26:42:ae:d7:83:99:35:a2:db:2c:
         19:68:f5:0f:d6:23:7a:4f:42:4e:f4:05:77:c7:f4:13:29:9a:
         22:49:00:f3:d4:1f:ff:41:b8:a1:47:f5:44:fe:07:10:db:de:
         41:cc:a0:99:9d:c1:24:95:c9:78:4c:a2:9c:b2:ab:22:34:98:
         4f:ab:86:cb:4b:73:5b:ce:6f:77:ec:e3:d4:61:d8:a6:44:4b:
         16:94:af:02:1e:e6:85:17:38:f0:b2:e9:ab:f4:7f:2c:2f:96:
         48:5b:70:4d:e1:97:10:aa:26:a5:a8:3b:ac:2d:dd:76:62:32:
         7c:95:e0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:34:05 2026 by rpki-client